Mailing-List: contact security-dev-help@xml.apache.org; run by ezmlm
Precedence: bulk
Reply-To: security-dev@xml.apache.org
Received-SPF: pass (asf.osuosl.org: domain of fmondelli@mtg.de designates
 62.144.85.193 as permitted sender)
Message-ID: <43EB12A1.1000704@mtg.de>
Date: Thu, 09 Feb 2006 11:00:01 +0100
From: Fabio Mondelli <fmondelli@mtg.de>
Reply-To: fmondelli@mtg.de
Organization: media transfer AG
User-Agent: Thunderbird 1.5 (Windows/20051201)
MIME-Version: 1.0
To: security-dev@xml.apache.org
Subject: signed xml does no more contain: <?xml version="1.0"
 encoding="UTF-8"?>
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit

Hello,
I want to sign and verify xml files.

in my case, the signed file does not contain the first line: <?xml 
version="1.0" encoding="UTF-8"?> from the original document.

what could be the reason? Im doing a enveloped xml signature.

here is the code:

DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
             dbf.setNamespaceAware(true);
             DocumentBuilder db = dbf.newDocumentBuilder();
             Document doc = 
db.parse(parameterObject.getUnsignedInputXMLFile());
             String BaseURI = 
parameterObject.getSignedXMLFile().toURL().toString();
             XMLSignature sig = new XMLSignature(doc, BaseURI, 
XMLSignature.ALGO_ID_SIGNATURE_RSA_SHA1);
...


             Element rootElement = doc.getDocumentElement();
             rootElement.insertBefore(sig.getElement(), 
rootElement.getFirstChild());
             sig.addResourceResolver(new OfflineResolver());
             Transforms transforms = new Transforms(doc);
 
transforms.addTransform(Transforms.TRANSFORM_ENVELOPED_SIGNATURE);
transforms.addTransform(Transforms.TRANSFORM_C14N_WITH_COMMENTS);

thank U!